Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/8a9e8758-2b74-3c9d-867e-32785c6bd939.roa
File:                     8a9e8758-2b74-3c9d-867e-32785c6bd939.roa (raw, json)
Hash identifier:          6ZInIvsmUm+YBo6FJn0d+j0e41vsRgE2IEpq+I2sKF4=
Subject key identifier:   6E:CD:BE:50:14:CF:83:D1:8B:2D:14:40:20:A3:52:68:5C:EC:5E:DA
Certificate issuer:       /CN=b7ee25bf-07ad-498c-82af-bf23e21b045b
Certificate serial:       010D0C9F43285842A5D3CA8CC6C83E1443BB07E0
Authority key identifier: DB:8D:18:46:7F:E3:9E:7B:A6:90:9D:0A:31:D2:E1:78:87:A7:BF:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/8a9e8758-2b74-3c9d-867e-32785c6bd939.roa
Signing time:             Mon 24 Jul 2023 01:00:18 +0000
ROA not before:           Mon 24 Jul 2023 01:00:18 +0000
ROA not after:            Sun 22 Oct 2023 01:00:18 +0000
asID:                     398337
IP address blocks:        69.41.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a5:d3:ca:8c:c6:c8:3e:14:43:bb:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ee25bf-07ad-498c-82af-bf23e21b045b
        Validity
            Not Before: Jul 24 01:00:18 2023 GMT
            Not After : Oct 22 01:00:18 2023 GMT
        Subject: CN=8427e217-1034-49a9-8476-047267131a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:45:9c:e0:7a:14:ed:f3:8a:43:62:15:ef:
                    27:a2:04:80:a2:f9:1e:22:80:c9:76:50:2a:90:b8:
                    a8:26:0a:88:e9:4a:53:7d:6a:4a:05:b1:31:57:17:
                    8c:32:71:24:33:f3:34:42:70:da:a8:36:30:7a:24:
                    80:ab:97:60:c3:02:92:92:77:ce:c4:52:b3:e5:51:
                    e4:09:2f:4c:c2:dd:fc:8c:a5:11:da:b1:6a:8a:b9:
                    3b:57:ac:28:f5:b6:46:95:ac:e0:5d:21:65:81:84:
                    d5:d9:ba:da:92:db:31:59:35:c7:7f:65:c2:d7:4f:
                    b9:79:9e:1c:25:eb:11:af:69:5e:71:20:df:26:1f:
                    0c:72:9a:5a:ea:b2:10:24:0b:79:bf:4b:f4:34:b9:
                    7a:5d:0b:98:4b:8c:d5:ad:d3:d9:0c:02:9a:ab:bf:
                    62:7e:42:d8:68:75:2a:96:da:8d:ff:4b:6b:46:3d:
                    b1:c9:23:e5:c7:78:27:2d:67:ef:ce:52:13:13:a1:
                    f6:4d:ba:72:1c:50:c3:1e:7d:e2:81:94:56:21:90:
                    84:59:9d:09:ef:3d:29:8c:36:1b:b8:07:d2:3e:d9:
                    4d:67:a8:16:6a:13:84:3c:31:4f:49:3f:e1:c3:9d:
                    fa:c5:98:e2:0c:f4:a0:2b:0e:b8:8b:3a:80:8e:22:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:BE:50:14:CF:83:D1:8B:2D:14:40:20:A3:52:68:5C:EC:5E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/8a9e8758-2b74-3c9d-867e-32785c6bd939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b/b7ee25bf-07ad-498c-82af-bf23e21b045b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:8D:18:46:7F:E3:9E:7B:A6:90:9D:0A:31:D2:E1:78:87:A7:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b7ee25bf-07ad-498c-82af-bf23e21b045b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:81:7a:2e:a1:36:a6:80:bc:be:4a:ab:8b:63:3c:31:f9:13:
         a1:5a:06:e9:37:6a:32:e8:ec:a3:14:e2:43:37:bd:dc:1e:f1:
         75:cb:fc:17:99:58:8a:ad:0b:3d:91:34:7a:2a:c7:04:62:16:
         fa:23:19:2f:22:06:85:d1:fa:db:36:10:b9:a5:b0:14:a5:14:
         4e:2b:7e:0e:1a:c2:6e:fc:61:f2:eb:52:94:27:98:e4:39:2b:
         b7:8a:5d:81:98:6d:73:f1:e6:a8:23:aa:93:70:cc:bf:f5:81:
         4e:68:4b:eb:ce:b7:60:9f:d5:58:eb:84:97:07:f5:d4:28:3d:
         e0:8c:4b:b1:4b:2c:0c:a1:dd:4e:75:f9:28:8f:77:63:da:49:
         88:ff:cf:13:e4:0e:5c:98:77:5f:1f:c4:c1:f3:da:cc:9b:9f:
         b2:04:e1:15:df:79:6f:ce:6b:ea:29:3b:22:6e:08:b4:19:3b:
         86:cd:a9:b9:6c:b0:b2:b2:e3:fe:09:8f:2f:3d:60:90:94:a1:
         69:24:29:a9:7e:5e:23:a5:9b:f7:b5:d2:c1:c0:b8:97:12:f4:
         d3:12:0d:6e:43:f1:23:a1:a5:fd:a7:09:2d:31:9f:56:fb:1d:
         4a:23:32:d5:53:33:51:48:48:df:6b:1a:3a:c4:99:de:74:19:
         b4:d3:30:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKl08qMxsg+FEO7B+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjdlZTI1YmYtMDdhZC00OThjLTgyYWYtYmYyM2UyMWIw
NDViMB4XDTIzMDcyNDAxMDAxOFoXDTIzMTAyMjAxMDAxOFowLzEtMCsGA1UEAxMk
ODQyN2UyMTctMTAzNC00OWE5LTg0NzYtMDQ3MjY3MTMxYTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn5FnOB6FO3zikNiFe8nogSAovkeIoDJdlAq
kLioJgqI6UpTfWpKBbExVxeMMnEkM/M0QnDaqDYweiSAq5dgwwKSknfOxFKz5VHk
CS9Mwt38jKUR2rFqirk7V6wo9bZGlazgXSFlgYTV2braktsxWTXHf2XC10+5eZ4c
JesRr2lecSDfJh8Mcppa6rIQJAt5v0v0NLl6XQuYS4zVrdPZDAKaq79ifkLYaHUq
ltqN/0trRj2xySPlx3gnLWfvzlITE6H2TbpyHFDDHn3igZRWIZCEWZ0J7z0pjDYb
uAfSPtlNZ6gWahOEPDFPST/hw536xZjiDPSgKw64izqAjiJAZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7NvlAUz4PRiy0UQCCjUmhc7F7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iN2Vl
MjViZi0wN2FkLTQ5OGMtODJhZi1iZjIzZTIxYjA0NWIvOGE5ZTg3NTgtMmI3NC0z
YzlkLTg2N2UtMzI3ODVjNmJkOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjdlZTI1YmYtMDdhZC00OThjLTgy
YWYtYmYyM2UyMWIwNDViL2I3ZWUyNWJmLTA3YWQtNDk4Yy04MmFmLWJmMjNlMjFi
MDQ1Yi5jcmwwHwYDVR0jBBgwFoAU240YRn/jnnumkJ0KMdLheIenv0YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iN2VlMjViZi0wN2FkLTQ5OGMtODJhZi1iZjIz
ZTIxYjA0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSleMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuBei6hNqaAvL5Kq4tjPDH5E6FaBuk3ajLo7KMU4kM3vdwe8XXL/BeZ
WIqtCz2RNHoqxwRiFvojGS8iBoXR+ts2ELmlsBSlFE4rfg4awm78YfLrUpQnmOQ5
K7eKXYGYbXPx5qgjqpNwzL/1gU5oS+vOt2Cf1VjrhJcH9dQoPeCMS7FLLAyh3U51
+SiPd2PaSYj/zxPkDlyYd18fxMHz2sybn7IE4RXfeW/Oa+opOyJuCLQZO4bNqbls
sLKy4/4Jjy89YJCUoWkkKal+XiOlm/e10sHAuJcS9NMSDW5D8SOhpf2nCS0xn1b7
HUojMtVTM1FISN9rGjrEmd50GbTTMGI=
-----END CERTIFICATE-----